I have seen a tutorial from Kevin Skoglund about escaping characters like single quote(’), double quote(”), backslash (\) in MySQL queries.
A simple way is to turn on the magic_quotes_gpc in PHP settings, but it is not a good way as you know the servers have different configurations.
Second way is to use mysql_real_scape_string PHP function which has been added from 4.3.0 version to PHP, and using it may encounter some problems with older versions.
The best way is to use combination of those methods in a function, here it is :
function mysql_clean($value) {
$magic_quotes_active = get_magic_quotes_gpc();
$new_enough_php = function_exists("mysql_real_scape_string");
if ($new_enough_php) {
if ($magic_quotes_active) {
$value = stripslashes($value); }
$value = mysql_real_scape_string($value);
} else {
if (!$magic_quotes_active) {
$value = addslashes($value); }
}
return $value;
}
Hope it will be useful for you

I am assuming that you can make a navigation bar with CSS, if not you can refer to this post for more information.
Usually when we using includes in our site, we can not use that static navigation highlighting with our pages, here I am going to use PHP and CSS to make our navigation highlight depends on which page we are in.
You can install PHP on Windows machines (98,ME,NT,2000,XP,2003,VISTA) with Apache and MySQL.
But on Windows 98 and ME you may have some problems with Apache.
In other way you can install these all in one packages :
WAMP (Windows, Apache, MySQL, PHP)